Samsung Smart Fridge - Revision history

Kayvon2008: /* System-data partition */

2021-12-31T06:52:56Z

‎System-data partition

2021-12-31T06:52:39Z

‎System-data partition

2021-11-30T05:18:12Z

2021-11-28T04:15:55Z

2021-11-28T04:14:41Z

2021-11-27T03:55:52Z

‎Media folder

2021-11-27T03:54:10Z

‎Energystar

2021-11-27T03:52:59Z

‎Glympse Family Map

2021-11-27T03:51:45Z

‎Tizen Browser

2021-11-27T03:50:21Z

‎Tizen Browser

@@ Line 30: / Line 30: @@
 *The "\var\lib\bluetooth\<BT_MAC>\cache" folder contains various files, named as a Mac Address. In the provided dataset 6 files are stored in the folder. Every file contains a device name. They seem to be "seen" devices, although more testing is needed.
 *The "\var\lib\buxton2\system.db" contains information about OS settings. The database needs more research to understand the exact content, but it apparently contains interesting configuration and information embedded in BLOB data. Here follow the full settings list.
-{{Pre}}
 db/refrigerator/modelType

@@ Line 30: / Line 30: @@
 *The "\var\lib\bluetooth\<BT_MAC>\cache" folder contains various files, named as a Mac Address. In the provided dataset 6 files are stored in the folder. Every file contains a device name. They seem to be "seen" devices, although more testing is needed.
 *The "\var\lib\buxton2\system.db" contains information about OS settings. The database needs more research to understand the exact content, but it apparently contains interesting configuration and information embedded in BLOB data. Here follow the full settings list.
-<code>
+{{Pre}}
 db/refrigerator/modelType
@@ Line 167: / Line 167: @@
 db/setting/lcd_backlight_normal
-</code>
+</pre>
 **Some of these BLOB data can be easily read, like the Wi-Fi BSSID Address that in the provided dataset is 70:2c:1f:41:e2:42 .
 *The "\var\lib\connman\settings" file contains information about network services (WiFi, Bluetooth, Wired, Cellular) and if they are enabled or not.

← Older revision		Revision as of 05:18, 30 November 2021
Line 218:		Line 218:
	==Links==		==Links==
	* https://blog.digital-forensics.it/2020/12/a-journey-into-iot-forensics-episode-1.html		* https://blog.digital-forensics.it/2020/12/a-journey-into-iot-forensics-episode-1.html
		+
		+	[[Category:Samsung]]

@@ Line 2: / Line 2: @@
 |formattype=physical
 |subcat=Networked devices
-}} '''Samsung Smart Fridges''' with the Family Hub software are smart fridges that run Tizen. A dataset shared by VTO labs has an image of the all of the partitions like the system and data partition. The blog ZENA forensics has analyzed the dataset for evidence. (Just like a historian, EVERYTHING counts for a case to be solved)
+}}'''Samsung Smart Fridges''' with the Family Hub software are smart fridges that run Tizen. A dataset shared by VTO labs has an image of  all of the partitions like the system and data partition. The blog ZENA forensics has analyzed the dataset for evidence. (Just like a historian, EVERYTHING counts for a case to be solved)
 ==Storage format==
 They use a GPT partitioning schema and it has a total of 21 partitions.

@@ Line 1: / Line 1: @@
-Samsung Smart Fridges with the Family Hub software are smart fridges that run Tizen. A dataset shared by VTO labs has an image of the all of the partitions like the system and data partition. The blog ZENA forensics has analyzed the dataset for evidence. (Just like a historian, EVERYTHING counts for a case to be solved)
+{{FormatInfo
 ==Storage format==
 They use a GPT partitioning schema and it has a total of 21 partitions.

@@ Line 197: / Line 197: @@
 ===Media folder===
 *The "\home\owner\media\" folder contains user media files. The internal structure seems self explicative, even though the provided dataset only contains predefined documents and pictures.
 ==Links==
 * https://blog.digital-forensics.it/2020/12/a-journey-into-iot-forensics-episode-1.html

@@ Line 192: / Line 192: @@
 ===Energystar===
 *The "\user\home\owner\apps_rw\org.tizen.energystar" folder contains energy information. The "\user\home\owner\apps_rw\org.tizen.energystar\shared\trusted\usage.db" seems containing information about power usage with hourly timestamps ("power_usage_table" table).
 ==Links==
 * https://blog.digital-forensics.it/2020/12/a-journey-into-iot-forensics-episode-1.html

@@ Line 186: / Line 186: @@
 *This app is based on Chromium and it also uses a Cache folder ("\user\home\owner\appr_rw\gfamilymap\data\chromium-elf\cache\") that can be parsed with ChromeCacheView or Hindsight.
 *By analyzing the images stored in the cache folder I was able to find some Google Maps images geolocated at the VTO Labs headquarter, where probably the fridge was used and then acquired.
 ==Links==
 * https://blog.digital-forensics.it/2020/12/a-journey-into-iot-forensics-episode-1.html

@@ Line 182: / Line 182: @@
 *The "\user\data\browser-provider\database\.browser-provider-tabs.db" contains information about opened tabs. In the provided dataset you can find a single in entry in the "tabs" table, as shown in picture: it includes an URL (https://m.youtube.com/watch?v=bMjVvg8jOO4) and a creation date value (2018-02-07 18:18:30).
 *The "\user\home\owner\apps_rw\org.tizen.browser\data\chromium-elf\cache" folder contains browser cache items. As the Tizen Browser is based on Chromium, the Cache can be parsed with ChromeCacheView or Hindsight.
 ==Links==
 * https://blog.digital-forensics.it/2020/12/a-journey-into-iot-forensics-episode-1.html

@@ Line 180: / Line 180: @@
 *The Tizen OS 3.0 has a default browser named "Tizen Browser", based on Chromium. Details about the browser are available on the tvmode.org website. The Tizen Browser stores information in 2 main locations in the user partition: the "\user\home\owner\apps_rw\org.tizen.browser\" folder and the "\user\data\browser-provider\database\" folder.
 *The "\user\data\browser-provider\database\.browser-provider-history.db" file contains browser history, including visit date, URL and page title for each visited website. In the provided dataset we can find 4 Google searches ("funny cats", "thug life cats", "starman live", "best of he man") and two viewed YouTube videos (https://m.youtube.com/watch?v=M-P3l9ezaF8 and https://m.youtube.com/watch?v=bMjVvg8jOO4).
 ==Links==
 * https://blog.digital-forensics.it/2020/12/a-journey-into-iot-forensics-episode-1.html